Implementation of a Content-oriented Networking Architecture (CONA): A Focus on DDoS

In this paper we introduce a Content-oriented Networking Architecture (CONA) and describe its implementation on the NetFPGA-OpenFlow platform. CONA seeks to sub-stantiate a content-centric communication model to address accountability. In CONA, an access router is extended to figure out what contents are requested, and hence is called an agent. A CONA agent receives a content request from an attached host and delivers the requested content. In this way, CONA achieves the accountability and can take a coun-termeasure against resource-exhaustive attacks like DDoS. In the CONA implementation, we seek to support legacy hosts by redirecting HTTP requests (to the agent), captur-ing HTTP GET messages, and extracting content names. We implement CONA on a testbed consisting of NetFPGA-OpenFlow platforms. We also carry out experiments to il-lustrate a scenario in which CONA limits the behavior of a malicious host that generates a resource-exhaustive attack. 1